aDolus Technology Inc.

Are you attending Cybersecurity and Infrastructure Security Agency (CISA)’s “SBOM-a-Rama Fall 2024” in Denver next week?   After discussing important opportunities and issues on all things #SBOM, join Exiger for an exclusive happy hour on Wednesday, September 11th from 4-6pm. 🤝 Let’s keep the conversation going! 🤝   Our #SBOM experts, JC Herz and Katie Arrington, former DoD CISO, will be on hand to discuss brewing U.S. government agency and legislative mandates and how these may affect government and corporate technology buyers and their suppliers. 💻 Get a preview of our award-winning technology, including more information on our recent acquisition of aDolus to see how you can achieve full cyber supply chain visibility, even in the absence of contractual leverage.   ➡️ Sign up to get the details here: https://lnkd.in/e8tf53AZ #SBOMARAMA #CSCRM #Cyber #Software

We’re thrilled to announce that aDolus Technology Inc. is now a part of Exiger! Our combined technology is going to shine a searing light on the software supply chain and provide unprecedented visibility. To all our customers, partners, investors and wider team — thank you so much. Your support over the years has meant everything. We started out with a research grant from the U.S. Department of Homeland Security to address a scary (and poorly understood) problem. And with some very smart people + valued collaborators, we built a software visibility platform like no other. Very excited as we enter this next stage in safeguarding critical software supply chains. #SoftwareSupplyChain #SBOMs #BinaryAnalysis #AI

This weekend was hard for a lot of people. For sysadmins, CISOs, IT support teams, security teams, supply chain risk managers, third-party risk managers, customer success teams, account managers, everyone. It's hard because our ecosystem no longer stops at our doorstep. Especially with the incredible scale and innovation that cloud adoption has enabled us to achieve, it creates systemic dependencies. That is why Exiger exists. To give our customers visibility to these dependencies in their extended ecosystem and to help them to manage the inevitable risk mitigation or remediation that will occur when the unforeseen and unpredictable, but expected, risk event occurs. However, I don't want to make this a sales pitch. That's why I was silent on Friday and why I won't make big claims in today's post. I can see the volume of Crowdstrike installations in our Cyber Supply Chain Explorer and I know that this issue affected us all. I just want to thank our IT & Security teams and our partners. As a Microsoft and CrowdStrike customer, these issues did briefly impact us. Also, thank you to CrowdStrike for being a great partner and throwing everything at this. We had no business operations or customer impact due to this event. Because of the automated continuous monitoring on our network and infrastructure established by Anthony Percival and Clewin McPherson, our team immediately spotted the affected systems and quickly resolved any system disruption. As of 5:00 am Friday morning, there were no issues impacting client facing systems and our internal systems were up and running. Our business operations and customer systems were secure and unaffected. Outside of individual Microsoft laptops and a few data partners who had their own issues, we didn't have a single ticket IT ticket filed on Friday. Our customers did not experience a break in services, disruption or SLA event. Thank you to our global IT & Security team who worked the last three days on the front lines of this issue and in each of our offices. Below are a few key team members who I would like to recognize. Stephane Bailleul Josh Gosnell Chad Aquino Ovidiu Grossu Andreea Gondor Manish Vora Vishal Abrol Joe Roberts Sean Kaynes Sanjay Singh JaVanisha Silver  Bryan La Kiara Sexton Carrie Wibben Jonathan Goldman Cameron Holt Kody Gurfein Matt Hibbard Eli Cherkasky Brendan Galla

Join rock star lineup Eric Byres, Megan Samford of Schneider Electric, Ellen Boehm of Keyfactor and moderator Patrick C Miller of Ampyx Cyber next Wed at 9:00 am PDT as they discuss real-world applications of #cybersecurity strategies unique to #manufacturing. Register here: https://adol.us/4bHrUsV

We have a new blog post from Marcello Delcaro describing our response to the #vulnerability in the #XZ Utils library. We reassured our customers that they were at no risk from this threat (and spared them the costly task of wading through false positives to find it). #liblzma #softwaresupplychain risk https://adol.us/4bbr3k8

Learn how to reduce cyber risks in your software supply chain at IIoT World Manufacturing Days #IIoTWorldDay. Eric Byres will be sharing the latest technologies to safeguard your OT environment from supply chain risk. https://adol.us/3Wf1ieg

We are delighted to be featured in the BC Information Security & Cybersecurity Capabilities Export Directory. Thanks to BC Trade+Investment and to the Canadian Trade Commissioner - Vancouver. https://adol.us/3VYLlsq

ICYMI... our own Ron Brash presented last week on the technical stage at #s4x24. He shared the alarming fact that the backups you are making may not be true backups. Beware of #tampering, missing bytes, and custom formats.

Congratulations to Lee Sayao the lucky winner of our growler here at #s4x24 in the #Vulnerability Management pavilion.

Backdoored hardware is an example attack in Eric Byres' proposed taxonomy for supply chain attacks. Thanks to Exiger for providing all the additional intelligence on the entity involved.